Best Practices for Privacy-Sympathetic Biometric Deployment